Login Request a demo
BC
Product
Booking Calendar
by Wpbookingcalendar · last CVE Feb 12, 2025
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 1High 0Medium 5Low 0
Severity
All severities6Critical1High0Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Booking Calendar to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-1207
9.8
3%
Feb 8
Booking Calendar <= 9.9 - Unauthenticated SQL Injection
Affected: before 9.9.1
CVE-2023-4620
6.1
1%
Oct 16
Booking Calendar < 9.7.3.1 - Unauthenticated Stored XSS
Affected: before 9.7.3.1
CVE-2024-6930
5.4
0%
Jul 24
WP Booking Calendar <= 10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingform Shortcode
Affected: before 10.2.2
CVE-2023-51520
5.4
0%
Feb 1
WordPress Booking Calendar Plugin < 9.7.4 is vulnerable to Cross Site Scripting (XSS)
Affected: before 9.7.4
CVE-2024-13821
5.3
0%
Feb 12
WP Booking Calendar <= 10.10 - Unauthenticated Post-Confirmation Booking Manipulation
Affected: before 10.10.1
CVE-2022-33177
4.3
0%
Sep 6
WordPress Booking Calendar plugin <= 9.2.1 - Cross-Site Request Forgery (CSRF) vulnerabiulity
Affected: through 9.2.1
Showing 6